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DETAILED ACTION 
Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 37-40, 49-51 and 54 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Ross et al. 

Referring to claim 37, Ross et al. discloses a method of performing policy 
enforcement by a switch, comprising: receiving a plurality of frames (col. 4 lines 65-67); 
comparing (flow label, col. 5 lines 5-1 0) the values of one or more fields (Fig. 4) of the 
determined frames to respective fields of entries of the list; and forwarding, discarding 
(deny, col. 5 lines 23-30) or further analyzing frames determined not to be compared, 
but does not explicitly teach of determining whether to compare the values of one or 
more fields of at least some of the plurality of frames to entries of a list of policies of 
groups of frames. However, determining based on the rule elements loaded into the 
CAM, the comparing will either match a CAM entry or not is disclosed in (col. 5 lines 10- 
14). Therefore it would have been obvious to one having ordinary skill in the art at the 
time the invention was made to have included determining whether to compare the 
values of one or more fields of at least some of the plurality of frames to entries of a list 
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of policies of groups of frames because it is part of a rule-based routing or switching 
decision process (col. 6 lines 1-4) such as ACL processing as suggested by Ross et al. 

Referring to claim 38, Ross et al. discloses a method according to claim 37, 
wherein determining whether to compare comprises determining based on the physical 
port from which the frame was received (col. 8 lines 1 1-31 and col. 10 line 52-col. 1 1 
line 3). 

Referring to claim 39, Ross et al. discloses a method according to claim 37, 
wherein determining whether to compare comprises determining based on the protocol 
of the frame (col. 13 lines 50-60). 

Referring to claim 40, Ross et al. discloses a method according to claim 
37, wherein further analyzing comprises transferring to a processor of the switch (DBus, 
col. 7 lines 55-67). 

Referring to claim 49, Ross et al. discloses a method of performing policy 
enforcement by a switch, comprising: receiving a plurality of frames; comparing at least 
some of the received frames to a list of groups of frames and respective policies (col. 5 
lines 7-22); but does not explicitly teach of creating entries in the list for less than all of 
the compared frames for which no match was found in the comparison to the list (col. 5 
lines 23-30). However, entries that were created for some of the compared frames are 
disclosed in (col. 25 line 61 -col. 26 line 2). Therefore, it would have been obvious to 
one having ordinary skill in the art at the time the invention was made to have included 
creating entries in the list for less than all of the compared frames for which no match 
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was found in the comparison to the list in order to provide for additional level of flexibility 
for rule element checking as suggested by Ross et al. 

Referring to claim 51, Ross et al. discloses a method according to claim 49, but 
does not explicitly teach wherein creating entries in the list for less than all of the 
compared frames comprises creating entries only for frames belonging to 
connectionless protocols. However, Ross et al. discloses UDP, which is a 
connectionless protocol in (col. 13 line 65-col. 14 line 63). Therefore it would have been 
obvious to one having ordinary skill in the art at the time the invention was made to 
have included creating entries in the list for less than all of the compared frames 
comprises creating entries only for frames belonging to connectionless protocols 
because ACLs give you the ability to specify which protocols and/or frames to permit or 
deny as suggested by Ross et al. 

Referring to claim 54, Ross et al. discloses a method according to claim 49, but 
does not explicitly teach of comprising determining for compared frames, a probability 
that additional frames of the same session will be received by the switch and creating 
entries only for frames with a probability higher than a determined level. However, Ross 
et al. discloses pre-processing of the elements of the flow label (col. 7 lines 40-52) and 
a Layer 4 Mapping Unit (col. 8 lines 1 1 -63), which provides logical operations. 
Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to have included comprising determining for compared frames, 
a probability that additional frames of the same session will be received by the switch 
and creating entries only for frames with a probability higher than a determined level in 
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order to prevent multiple entries in a CAM that apply to a given complex rule so that 
CAM size is limited and cost of the device stays minimal as suggested by Ross et al. 
3. Claims 70-72, 74 and 76 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Zaumen et al. 

Referring to claim 70, Zaumen et al. discloses a method of updating a policy 
table (Fig. 2) of a switch, comprising: 

receiving (newly arrived packet at the subsystem 1 10, col. 5 lines 40-45) a frame which 
is not directed to the switch; and 

performing layer-2 switching of the received frame (col. 5 lines 25-39 and col. 3 
lines 35-45), but does not explicitly teach of creating an entry in the policy table of the 
switch, for the session to which the received frame belongs. However, entries in the 
address table are disclosed in (col. 6 lines 33-37). Therefore, it would have been 
obvious to one having ordinary skill in the art at the time the invention was made to 
have included creating an entry in the policy table of the switch, for the session to which 
the received frame belongs because entries have to be created in order to define flow 
membership as suggested by Zaumen et al. 

Referring to claim 71, Zaumen et al. discloses a method according to claim 70, 
comprising determining whether the received frame 

requires non-default policy enforcement (col. 5 lines 45-56), but does not explicitly teach 
of creating the entry is performed only if the received frame requires non-default policy 
enforcement. However, the CPS 130 can be configured to handle the forwarding 
aspects based on its software routines (col. 5 lines 50-56). Therefore it would have 
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been obvious to one having ordinary skill in the art at the time the invention was made 
to have included creating the entry is performed only if the received frame requires 
non-default policy enforcement because the software routines can be configured to 
handle the forwarding aspects as suggested by Zaumen et al. 

Referring to claim 72, Zaumen et al. discloses a method according to claim 71 , 
wherein the received frame belongs to a connection based protocol (TCP, col. 5 lines 7- 
14 and col. 6 line 10). 

Referring to claim 74, Zaumen et al. discloses a method according to claim 71 , 
wherein determining whether the received frame requires non-default policy 
enforcement comprises checking whether the frame belongs to a group which requires 
frame counting (counter, col. 8 lines 21-28). 

Referring to claim 76, Zaumen et al. discloses a method according to claim 71 , 
wherein determining whether the received frame 

requires non-default policy enforcement comprises checking whether the frame 
requires a non default QoS behavior (QoS, col. 5 lines 48-56). 
4. Claim 75 is rejected under 35 U.S.C. 103(a) as being unpatentable over Zaumen 
et al in view of Ross et al. 

Referring to claim 75, Zaumen et al. discloses a method according to claim 71 , 
but does not explicitly teach wherein determining whether the received frame requires 
non-default policy enforcement comprises checking whether the frame violates security 
rules. However, Ross et al. discloses security rules (ACL, col. 2 lines 26-38). 
Therefore, it would have been obvious to one having ordinary skill in the art at the time 
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the invention was made to have included determining whether the received frame 
requires non-default policy enforcement comprises checking whether the frame violates 
security rules in order for the CAM to enhance the efficiency of rule processing by 
providing an additional level of flexibility for rule element checking as suggested by 
Ross et al. 

5. Claim 70 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Viswanath et al. (U.S. 6,798,788). 

Referring to claim 70, Viswanath et al. discloses a method of updating a policy 
table of a switch (Fig. 1 , switch 12 and respective portions of the spec), comprising: 
receiving (receives, col. 4 lines 40-45) a frame which is not directed to the switch; and 
performing layer-2 switching (layer 2 switching, col. 4 lines 40-52) of the received frame, 
but does not explicitly teach of creating an entry in the policy table of the switch, for the 
session to which the received frame belongs. However, entries in the policy table are 
disclosed in (col. 6 lines lines 40-43, col. 7 lines 53-65 and col. 8 lines 30-35). 
Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to have included creating an entry in the policy table of the 
switch, for the session to which the received frame belongs because the entries are 
created when the IP source address, IP destination address, TCP/UDP input port, 
TCP/UDP output port, and corresponding policy identifier are stored by the policy cache 
as suggested by Viswanath et al. 
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Response to Arguments 

6. Applicant's arguments with respect to claims 37-40, 49-51, 54, 70-72, 74 and 76 
have been considered but are moot in view of the new ground(s) of rejection. 

7. Applicant's arguments filed 6/1 5/2000 have been fully considered but they are 
not persuasive. 

8. In response to applicant's argument that Ross et al. fails to supplement the 
fundamental deficiencies of Zaumen et al., the test for obviousness is not whether the 
features of a secondary reference may be bodily incorporated into the structure of the 
primary reference; nor is it that the claimed invention must be expressly suggested in 
any one or all of the references. Rather, the test is what the combined teachings of the 
references would have suggested to those of ordinary skill in the art. See In re Keller, 
642 F.2d 413, 208 USPQ 871 (CCPA 1981). 

Allowable Subject Matter 

9. Claims 1-36, 41-44, 56-59 and 62-69 are allowed. 

10. Claims 50, 52, 53, 73 and 77 are objected to as being dependent upon a rejected 
base claim, but would be allowable if rewritten in independent form including all of the 
limitations of the base claim and any intervening claims. 
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Conclusion 

1 1 . Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

or faxed to: 

(703) 305-3988, (for formal communications intended for entry) 

Or: 

(703) 305-3988 (for informal or draft communications, please label 
"PROPOSED" or "DRAFT") 

Hand-delivered responses should be brought to Crystal Park II, 2121 
Crystal Drive, Arlington, VA. 22202, Sixth Floor (Receptionist). 

12. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jamal A. Fox whose telephone number is (571 ) 272- 
3143. The examiner can normally be reached on Monday-Friday 6:30 AM - 5:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Wellington Chin can be reached on (571) 272-3134. The fax phone 
numbers for the organization where this application or proceeding is assigned are (703) 
872-9306 for regular communications and (703) 872-9315 for After Final 
communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 306- 
0377. 
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